fb313d8 Use default ssh host key algorithms

Authored and Committed by cheimes 4 years ago
    Use default ssh host key algorithms
    
    ipa-client-install no longer overrides SSH client settings for
    HostKeyAlgorithms. It's no longer necessary to configure
    HostKeyAlgorithms. The setting was disabling modern algorithms and
    enabled a weak algorithm that is blocked in FIPS code.
    
    The ipa-client package removes IPA's custom HostKeyAlgorithm from
    /etc/ssh/ssh_config during package update. Non-IPA settings are not
    touched.
    
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1756432
    Fixes: https://pagure.io/freeipa/issue/8082
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    
        
file modified
+4 -0
file modified
+0 -1